Web service works on port 80, fails with SSL

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Kenneth Moss - 28 Dec 2005 19:09 GMT

I have a web service I am calling which I made. I am consuming this service
from another domain (and I've tried from a windows app also). I added a
certificate to the web service so it will use ssl. I made a web reference to
the unsecured and secured version of the web service. When connecting
unsecured, it works fine. When I connect secured I get this error:

The underlying connection was closed: Could not establish trust relationship
for the SSL/TLS secure channel.

When I open a secure page on my website, it prompts to accept the
certificate. Shouldn't calling a web service do the same thing? Do I have
to install the exported .cer file on all clients calling the web service? I
want to use my web service using SSL without forcing the consumers to install
a special certificate.

Thank You,
Kenneth Moss

Reply to this Message

Martin Kulov - 29 Dec 2005 11:52 GMT

>I have a web service I am calling which I made. I am consuming this
>service
[quoted text clipped - 19 lines]
> Thank You,
> Kenneth Moss

Hi Kenneth,

I order to use SSL with web services make sure that you can open the SSL
connection in IE without any dialogs or warnings. Basically a web service
can not ask the user to accept the certificate that's why it fails to open
the connection.
If your certificate is signed by VeriSign or other certificate authority you
do not need to install the certificate on client machines.

Regards,

Signature

Martin Kulov
http://www.codeattest.com/blogs/martin

MCAD Charter Member
MCSD.NET Early Achiever
MCSD

Reply to this Message

reez - 29 Dec 2005 15:33 GMT

did you set the port in IIS to use 443? i think i got this problem too
because of that...not sure if this will help

Reply to this Message

Kenneth Moss - 29 Dec 2005 19:03 GMT

using https forces it to use the ssl port, just as using ftp:// forces it to
use port 25. I don't believe you have to manually enter the port in the url
if you are using the default port.

> did you set the port in IIS to use 443? i think i got this problem too
> because of that...not sure if this will help

Reply to this Message

reez - 29 Dec 2005 15:33 GMT

did you set the port in IIS to use 443? i think i got this problem too
because of that...not sure if this will help

Reply to this Message

Kenneth Moss - 29 Dec 2005 23:47 GMT

You just telling me it works without installing the cert on every site just
set my mind at ease -- thanks for that. It did end up being the certificate
popping up a dialog for the secure side. When I made the CSR it used
domain.com rather than www.domain.com. So as long as i use domain.com
without the www. it all works now.

Thanks for the help guys, I do appreciate it.

> >I have a web service I am calling which I made. I am consuming this
> >service
[quoted text clipped - 30 lines]
>
> Regards,

Reply to this Message

txtoth@gmail.com - 06 Jan 2006 23:07 GMT

In Axis you can supply a secure socket factory class which gets used
for ssl connections. Your socket factory then knows the cert to use. Is
there no such hook or mechanism in WSE?

Reply to this Message

Web service works on port 80, fails with SSL

Free Magazines